AINewsnow

Claude Code's 'don't ask again' permissions file leaks secrets into public repos

Research by Apiiro and GitGuardian found 104,185 copies of .claude/settings.local.json in public repositories, with over 1,100 containing API keys and other credentials saved via Claude Code's permission feature.

Read the full story at InfoWorld AI ↗

Timeline · 5 reports

  1. 2026-11-12 16:25 · DEV Community — AI
    Claude Code's don't-ask-again wrote 1,379 secrets into public GitHub files: check your repos before you write another allow rule
  2. 2026-11-12 14:06 · DEV Community — AI
    What your coding agent saves when you click "Don't ask again": a checklist for Foundry and Hardhat repos
  3. 2026-11-11 23:29 · r/ClaudeAI
    Heads up: Claude Code's "don't ask again" has been leaking secrets into public repos
  4. 2026-11-11 12:03 · InfoWorld AI
    Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem
  5. 2026-11-11 08:12 · DEV Community — AI
    What "Don't Ask Again" Saves in Claude Code, and How to Audit It

More stories

  1. Anthropic launches IPO with $1.4 trillion target as tech giants pledge $26 billion — Bloomberg AI
  2. Anthropic expands Claude into workplace suite with Sheets, Whiteboards, Meetings and manufacturing tools — Anthropic (X)
  3. Anthropic IPO Reportedly About Six Times Oversubscribed — Bloomberg AI
  4. Anthropic launches self-hosted Claude Managed Agents in private beta — Anthropic (X)
  5. Agent Experience (AX) emerges as successor to Developer Experience amid AI agent boom — DEV Community — AI
  6. Anthropic releases Claude Fable 5.2 and Mythos 5.2 — DEV Community — AI
  7. Anthropic launches Claude Fable 5.2, topping benchmarks at twice Opus 5.5's price — DEV Community — AI
  8. Anthropic prepares IPO at valuation below once-touted $2 trillion — Reuters AI

Get the daily brief of stories like this at 6:30 every morning →